Square-free discriminants of Frobenius rings 



Chantal David and Jorge Jimenez Urroz 
May 7, 2008 



Abstract 

Let E be an elliptic curve over Q. It is well known that the ring of endomorphisms 
of Ep, the reduction of E modulo a prime p of ordinary reduction, is an order of 
the quadratic imaginary field Q{iTp) generated by the Frobenius element TTp. When 
the curve has complex multiplication (CM), this is always a fixed field as the prime 
varies. Ifowever, when the curve has no CM, very little is known, not only about the 
order, but about the fields that might appear as algebra of endomorphisms varying 
the prime. The ring of endomorphisms is obviously related with the arithmetic of 
Up — 4p, the discriminant of the characteristic polynomial of the Frobenius element. In 
this paper, we are interested in the function 'JiE,r,h{x) counting the number of primes 
p up to a; such that Op — 4p is square-free and in the congruence class r modulo h. 
We give in this paper the precise asymptotic for tiE.r.hi^) when averaging over elliptic 
curves defined over the rationals, and we discuss the relation of this result with the 
Lang- Trotter conjecture, and with some other problems related to the curve modulo p. 

1 Introduction and statement of results 

Let E be an elliptic curve over Q with conductor Ne- For each prime p of good reduction (i.e. 
P \ Ne), E reduces to an elliptic curve over the finite field ¥p. The Frobenius endomorphism 
{x,y) 1-^ {xP,yP) of E/¥p has characteristic polynomial 

x'^ — QpX + p — (.X — TTp) (a; — 7fp) 

where \ap\ < 2y/p by the Hasse bound. Let End{E /¥p) be the ring of endomorphism of 
E/¥p. If p > 3 is an ordinary prime for E (or equivalently, 7^ 0), then 

End(£;/Fp) (8) Q = Q(7rp) 

is completely determined by the Frobenius ring Z[7rp] . The ring of endormorphism End(i?/Fp) 
is more subtle, and the Frobenius ring Z[7rp] can be a proper subset of End(i?/Fp). In fact, 
it follows from Deuring's Theorem |Dej that any order R such that 

Z[7rp] C i? C Q (TTp) 

can occur as the ring of endomorphism of some curve E over Fp such that the Frobenius of 
E has characteristic polynomial — UpX + p. It is then a natural question to ask whether 
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Z[7rp] ~ End(£'/Fp), or whether Z[7rp] is the maximal order of Q{TTp) (the second question 
is of course a refinement of the first one) , and when this happens for a fixed curve E when 
varying the prime p. 

For a fixed E/¥p, let Ap be the discriminant of the order End{E/¥p). Then, the "dis- 
tance" between the endomorphism ring and the Frobenius ring is encoded by the unique 
positive integer bp defined by the relation — 4p = 6|Ap. The 5p's where studied by Duke 
and Toth in [DuTo| . and by Cojocaru and Duke [CoDuj who showed that under the GRH 

#{p<x : p\Ne and bp = 1} ^ CcuiE)-^, 

logx 

for an explicit non-zero constant Ccd{E). The condition 6p = 1 is equivalent to the triviality 
of the Tate-Shafarevich group of E over its function field Fp(£'). 

In general, properties of the Frobenius ring can be deduced from a study of the arithmetic 
of Op — 4p and, in particular, in studying the square divisors of — Ap. In this paper, we 
study the following question: given an elliptic curve E over Q, for which primes p is a^ — 4p 
square-free? For those primes, the Frobenius ring Z[7rp] is the maximal order in Q(7rp). 
This also provides a refinement of the question of Cojocaru and Duke. Since the result of 
Cojocaru and Duke is itself a refinement of Serre's result about the cyclicity of the group 
i?(Fp), we have the string of implications 

flp — 4p squarefree bp = 1 Ei¥p) cycHc. 

Can we then show that there is a positive proportion of — Ap which are square-free, 
refining Cojocaru and Duke's and Serre's result? Maybe surprisingly, we believe that this is 
a much more difficult question. If E has complex multiplication (CM), — Ap square-free is 
equivalent to p lying in some quadratic progression. For example, let E be the CM elliptic 
curve = x^ — X with complex multiplication by Z[i]. Let p be an ordinary prime, which 
is a prime congruent to 1 modulo 4. Since E has rational 2-torsion, Op is even, and then 4 
divides — Ap, and the natural question to consider is the square-freeness of (Op — 4p)/4. 
Since E has complex multiplication by , ap — Ap^ —Af^ for some / € Z, and (a^ — Ap) / A 
is square-free if and only if / = I if and only if p — (ap/2)^ -I- I. 

Another reason to investigate square-freeness in the sequence — Ap is that it might 
shed light on the following conjecture. 

Conjecture 1 (Lang- Trotter conjecture [LaTr j ) Let K be an imaginary quadratic num- 
ber field, and E an elliptic curve over Q without complex multiplication. Let 

^E,Kix) = #{p<x :p\Ne and Q{np) ^ K} . 

Then as x ^ oo 

Ue.k{x)^Clt{E,K)-^, 
logx 

for some explicit constant Cijt{E,K) depending on E and K. 

Upper bounds for fl^ jf (x) were investigated by Serre, by Cojocaru, Fouvry and Murty 
|CoFoMu] . and by Cojocaru and David |CoDa| . But there are no known lower bounds for 
^e.k{x), in particular there are no known examples of (non-CM) elliptic curves such that 
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Q(7rp) — K for infinitely many primes p. In fact, we know much less than that, as there are 
no known examples of (non-CM) elliptic curves such that Dp, the discriminant of Q{7rp), 
lies in a fixed congruence class for infinitely many primes p. Here again, one could give a 
lower bound for the number of such primes by counting the number of primes p such that 
Op — 4p is square-free and in the prescribed congruence class, since in this case — 4p = Dp. 

Let ft, be a positive odd integer, and let r be any integer such that the greatest common 
divisor (r, h) is square-free. Let 

^\,r,h{x) = #{2 < p < a;, prime : - 4p G A(r, h)}, 

where A(r, h) is the set of square-free integers n such that n = r mod h. We remark 
that if (r, /i) is not square-free, then ^^Erhi^) ~ ^- f*^^ restriction to h odd, it 
simplifies technical aspects of the proof in various places, but it is not an essential restriction. 
Unfortunately, we cannot give an asymptotic (or a lower bound) for ^ ^ (x) , but we can 
prove that the correct asymptotic holds on average over elliptic curves. 

In all the following, E{a, b) denotes the elliptic curve given by the equation = + 
ax + b, with + 276^ ^ 0. 

Theorem 2 Let h be a positive odd integer, and let r be any integer such that (r, h) is 
square-free. Fix any e > 0. Let A,B he such that AB > x\o^ x, A,B > x^. Let C{A,B) 
be the set of all elliptic curves E(a,b) with integer coefficients a,b such that \a\ < A and 
b < B. Then, as x ^ oo, 

where £ is the positive constant 

3/. 11 i ll(,_i)(£_(^))ll eie-i) ' 

where all products are taken over odd primes i with the specified conditions. 

The result above is similar in spirit, and by the techniques used to prove it, to other 
average results as jBaCoDa] for the Koblitz's conjecture and [FoMu] and [DaPa] for the Lang- 
Trotter conjecture. All those results rely on the fact that the average over elliptic curves 
in C{A, B) can be rewritten as an average over elliptic curves over Fp by interchanging the 
summations, and this average can be reduced to an average of class numbers by means of 
Deuring's Theorem. Hence, Theorem [5] is equivalent to 

Theorem 3 Let h be a positive odd integer, and let r be any integer such that (r, h) is 
square-free. Let 

U^{p) #{E overWp : a^ - 4p e A{r,h)} . 

Then, as x ^ oo, 

3 log a; \\og^x)' 

where £ is the constant of Theorem\^ 
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There is another sequence related to clUptic curves which was investigated for square- 
freeness, namely the sequence p + 1 — ftp = |£'(Fp)| . Again, there should be a positive 
proportion of square-free p+ 1 — Op, but this is still an open question, and there are no known 
examples of non-CM elliptic curves over Q with infinitely many square-free p+1 — ap. The 
case of CM curves is very different. Let E be an elliptic curve with CM by an order O in a 
quadratic imaginary field K , and let p be a prime of ordinary reduction. Then, p + 1 ~ ap 
is square-free if and only if TTp — 1 — pi . . .p^ where the pi are distinct split primes in O, 
and the number of such tt S O can be counted. When E has CM by the maximal order of a 
quadratic imaginary field K, the asymptotic for the number of primes p such that p+1 — Up 
is square-free was obtained by Cojocaru |Co| . The number of square-free p+l — ap was also 
investigated in average over elliptic curves ¥p as p tends to infinity by Gekeler |Gej . The 
techniques that he uses are completely different from ours, and rely on the work of Howe 
|Hoj on the moduli spaces of elliptic curves over Fp with a given group structure. Gekeler 
then proved the analogue of our Theorem [3] for the sequence p + 1 — Op (his results are 
stated in a different way, but the two forms are easily seen to be equivalent). As a corollary 
of his result [Ge[ Proposition 4.2 (i)], one obtains, by going from the average over Fp to 
the average over Q as indicated in Section [2l that the number of primes p < x such that 
p+l — ap is square- free follows the predicted asymptotic on average over all elliptic curves. 
It is unclear if the techniques used by Gekeler could be used to prove Theorem [21 as Cp — 4p 
is not easily related to the group structure of E(¥p). 

The structure of our paper is as follows. In section [21 we reduce the average over elliptic 
curves over Q to an average over elliptic curves over Fp. There are several ways to do that, 
and we use multiplicative characters as in [BaShj and [BaCoDa] to obtain the short average 
of Theorem [51 Section [31 deals with some easy error terms of the asymptotic of Theorem 
[21 while Section [H deals with the main error term by applying the Theorem of Barban, 
Davenport and Halberstam. Section [51 deals with the main term of the asymptotic, and it 
is basically a computation of the constant (jll of Theorem [2l Finally, we explain in Section 
[6lwhat is the conjectural asymptotic for II^; ,,./i(a;). The conjectural constant is very similar 
to our average constant £, and Theorem [21 then gives additional evidence for the conjecture. 



2 Reduction to a short average over finite fields 

As we have mentioned in the introduction, the proof of Theorem [2l relies in reducing the 
average of n|; ^ hi-'-) average of class numbers by means of Deuring's Theorem. This 

could be done in a straightforward manner by just writing 

\CiA,B)\ ^ ^E,r,hi^) = EE \C{A,B)\ ^ ^' 



E<£C{A,B) p<x{s.t)i£S' ^ ' ^' kl<-4, |i>|<-E 

ass (mod p) 
h = t (mod p) 



where 



S = S{p, r, h) = {(si, S2) e ¥l : ap{E{si, sa))' - 4p e A(r, h)} . 
Observe that the number of terms in the middle sum is II'' (p) . The innermost sum is 
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simply 



AAB 

p2 



when A, B are big enough with respect to x. Hence, we get the asymptotic 



\C(A,B)\ ^ 



H" 



E,r. 



However, this approach results a poor average, as we need to take AB > x'^^'^ to get the 
asymptotic above. 

Following [BaSh] and [BaCoDa] . one can obtain a substantial improvement from a better 
use of the uniform distribution of equivalent elliptic curves. Indeed, since two elliptic curves 
E{si, S2) and E(ti, ^2) are isomorphic over ¥p if and only if ti = siu'^ and ^2 = S2U^ for some 
u G F*, there are {p — !)/# Aut(i5^(si, S2)) elliptic curves over Fp which are F^-isomorphic 
to a given elliptic curve E(si, 82)- Hence, we can write 



\CiA,B)\ 



EeC{A,B) 

1 



\C{AB)\ 



E E 

p<x {s,t)^S 



#Aut(g(.Sl,52)) 
p-1 



E 



(3) 



i|<A, |ijl<B, 31<u<p: 
a = .i«4 (mod p), 
6 = S2„6 („od p) 



where for each fixed si,S2 £ Fp, the innermost sum is over all integers \a\ < A, \b\ < B 
such that there exists u € F* with a = siu* (mod p) and b = S2U^ (mod p). We now want 
to approximate the innermost sum by its main term. This is the content of Lemma 4 of 
|BaCoDa] , and we will use it to prove the short average of Theorem [2] We include it here 
for reading convenience. 

Lemma 4 ^BaCoDai Lemma 4] For any positive integer k, we have as x ^ 00 



E p E 



E 1- 

i|<'4, \I>\<B, 31<u<p: 
a = s-i^t (mod p) 
b = tu^ (mod p) 



2AB 



< ABx^~^ log^"^ x + {AVb + B\/l)a;^+^ log^~^ x + sfABx^l'^ log^ x. 



Now, since 

|C(A,B)| =4^5 + 0(^ + 5), 
and # Aut(£'(s, i)) — 2 except when p\a or p|6, we can rewrite ([3]) as 

Ib ^ 2(p- 1 



^S^^V 2(^,-1) ^ l + o(^loglog. , 

P<a:(s,t)e5 ^ ^ |a|<A, |6|<B. 31<u<p: ^ => 

o = su4 (modp), 
6 = fu6 (,nod p) 



(4) 
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using the trivial bound 



h^H E i«iogiogx + 



A + B X 



' ^ ' r,<x \o.\<A => 

\b\<B 
a.h = (mod p) 

Then, using Lemma [4] to replace the first term in ([4]), and observing that the error term in 
l[4| is smaller than the error term of Lemma [H we have 

\C{A,B)\ E ^''E,rM^Y.^(^) (5) 
+0 {x^-^ log*~^ X + (^-1/2 + B-i/2)2;i+A log*-i a; + (AS)-i/22,3/2 ^ 

By choosing ^, B such that A, S > and AB > xlog* x, and fc large enough to have 
that efc > 1, we have that 



The heart of the proof of Theorem [2] then consists in an estimate for the main term in 
©, and we will show that 

n^-rn) X ( X \ 

^p(p-l) logx Viog'^y' 

which will complete the proof of Theorem [21 With ([7]) and partial summation, we also get 
that 

En''b) = fT^ + of-^), (8) 

^ 3 1ogx Vlog a;/ 

and the proof of Theorem [3] also follows from ([7]). We first apply Deuring's Theorem to 
rewrite the sum in ([6]) as a sum of class numbers. 

Theorem 5 (Deuring's Theorem JDef ) 

Let p > 3 be a prime and let t he an integer such that t^ — Ap < 0. Let £r{p) be the set of 
¥ p-isomorphism classes of elliptic curves defined over Fp with ap ~ t. Then, 

where Aut(£^) is the automorphism group of E and for any D <0, H{D) is the Kronecker 
class number 

mm- V ^(^//') 
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defined in terms of the class number h{D/ f"^) and number of units w{D/ f"^) ofQ{y/ D / f^). 
Then, for any fixed —2yfp < i < 2y^, there are exactly {p — l)H{t^ — 4p) elliptic curves 
defined over ¥p with ap = t. 

Using the previous theorem, and noting that for square-free D we have 

w{D) 

we can write 

n-'b) ^ hjt^^Ap) h{t^-4p) 

^ p{p - 1) ^ w(t^ - Ap)p ^ ^ w(t^ - An)p 

t2_4pgA(r,h) t2 „4p£A(T,/i) 

since t^ — Ap is not square-free when t is even. 

3 Terms divisible by big squares 

Let /? > a parameter to be chosen later, and let 

K=[log'f'xl Y^j^, R^log'^x. (10) 

We first split the sum over the primes up to x into K sums over the intervals [fcY, kY + Y] 
of length Y, and write ([9]) as 

T^^ = 2 Y Y ne-Api 

^p(p-l) ^ ^ ^ ^{f - Ap)p \\q^^^^ x) ' 

where the error term is to account for the primes p < Y . Using the Moebius function to 
detect squares, the main term of (|lip is 

l<k<K kY<p<kY+Y i<t<2vp ^ ^^-^^2 1*2-4^ 

t2 -4p = r mod h 

where Ti,T2 and T3 will be sums over small, medium, and large divisors d. In particular, 
for each p we define the intervals Ii = [1, R], I2 = {R, VY], h = {VY , and then 

odd odd J /,9 ^ \ 

E EM.) E 

kY<p<kY + Y rf2|4p_t2 

t2 _4p = i^ mod h 

for i = 1,2, 3. We show in this section that the terms corresponding to big squares d, namely 
T2 and T3, are small and will be part of the error term. 
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For T3 we use the fact that there is a unique representation of the numbers Ap—t^ = rri^u, 
where u is square-free, and that <P\Ap — if and only if d\m, to get the trivial upper bound 

T3«logx E 4= E r{m)\Sra{p)l 

l<k<K kY<p<kY+Y VF<m<2VP 

where Sm{p) = {1 < i < : Ap—t^~ m?u,u square-free}, and T(m) denotes the usual 
divisor function. To get the above upper bound, and in other estimations to come, we use 
the well-known bound h{—d) <C Vdlogd for the class number of a negative integer —d. 
Now, using the uniqueness of the representation, we can change the sum in m to a sum over 
square-free u < Ap/Y to obtain 

^3 « y E E (12) 

l<k<K kY<p<kY+Y 

where we have used that, for each square- free u fixed, the number of solutions to the equation 
Ap = + m?u is bounded above by the number of ideal divisors of Ap in the ring of integers 
of Q(-\/— u), together with the trivial bound rim) <C rrf ■ For T2 we switch the sums to get 

« (log-) E 4^ E E El 



/hY 

l<k<K ^'"^ R<d<VYl<t<2^kY+Y kY<p<kY+Y 

~ d^|4p — 



« (log.)y Y: f-^ E ^<(i°g-)|- (13) 

l<k<K R<d<VY 

4 An average of class numbers 

The main term of T comes from Ti. On each interval kY < p < kY -\- Y , we approximate 
the sum over {1 < t < S^/p} by {1 < i < 2\/kY} with an error term of i?Floga;. Replacing 
(fT3|l and ^ in (HH), we have 



p{v — 1) ^-^ ^-^ ^-^ ^-^ oj(t^ — 4p)p 

p<X^^^ l<^<^ l<£<2A/fcF kY<p<kY + Y V 

— — d2|t2_4p 

t2 _4p = r mod h 

-(-0(x/log''-ix) 

odd odd 



i E E E M^) E 

l<fc<X l<t<2v/fcy d<B. kY<p<kY + Y 



+0{x/\og'^-^x), 
using the class number formula. Let 

U = x^/'^R^. (14) 
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Since 



i(l,X.^-4p) = = 1^ +2)^ 



n>l n>l n>l 



n 

using Polya- Vinogradov inequality to bound the tail of the L-function, we obtain 

odd odd 



f 2 -4p = r mod /i 

+0(x/log''-^x), (15) 



since Xt2-4p(2) —1 for any in the previous conditions. Using quadratic reciprocity, we 
can write x as a character mod n, and we use this to rewrite the main term of psp as 



odd odd 

y. , — , , 

M 



l<k<K a(mod d<B 

l<t<2vTF (t2-Q,,i) = l (d,7it) = l 

(t2~r,h) = l c. = r mod (n.fe) r = 0mod(d2_h) 



where 



S{k,Y,n,t,a,d) — ^ 



p = i/(t,Q,r) mod [Tid2,/i] 

and vit^a^r) is the invertible residue modulo [n(P,h] solving the congruences 

4p = P — r mod /i, for (t^ — r,h) ~ 1, 
4p = — a mod n, for (i^ — a, n) = 1, 
4p = mod (f for (t, d) = 1, 

under the conditions {n^d) — 1, r = a mod (n, /i) and r = mod (d^, /i) insuring that the 
congruences are compatible. 

In order to compute the asymptotic of M , we first change the weights and consider 

^ odd -. odd 

^^' = ^ E E - E O E Kd)S'{KY^n,t^a^dl 

l<k<K riKU Q(mod n) d<R 

\<t<1-JkY (t^-~a.n) = l (d,nt) = l 

(t2-r,h) = l QEET- mod (.i.h) r=0mod(d2,h) 

where 

QUI. V , ^\ V4fcy-t2 logp 

fci'<p<fci'+"r ^ 

p=i/(t,Q!,T-) mod [7id2,/i] 
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Lemma 6 Let M and M' be the two sums defined above where Y = x/{K + 1) and K 
[log^'' x] for some /3 > 1 . Then as x ^ oo 

M-M' <^ ^ 



log/^-^x' 
Proof: It is enough to note that 



S{k,Y,n,t,a,d)-S'{k,Y,n,t,a,d)= Yl / _ ^/f^Z 



kY<p<kY+Y 
p=L'(t,cx,r) mod [nd-^ ,h] 



^ ^ y W kYlogkY } ^ A;nrf2 ' 



kY<p<kY-\-Y 
p = [^(t,a,r) mod [nd^ ,h] 



Summing over k, n, t, a, d, with trivial bounds for the remaining terms, gives the result. ■ 

We then have to evaluate the sum M' above. We first define some notation. For any 
positive integers a, q such that (a, (7) = 1, let 

^l){X,Y;a,q) = ^ logp 

Y 



X<p<X+Y 

p = a(mad q) 



E{X,Y;a,q) = ^iX,Y;a,q)- 



where, as usual, (p denotes the Euler function. 

Y 

Substracting and adding —- — to the sum M' above, we write it as M' = 81+82 

(p{[nd\h]) 

where 

2Y ^ y^KEZi V (-^ V /^(^) rifii 

' ^'^li^x nV. kYlogkY n ^^£^„^ \J £^ ^{[nd\h]) ^ ^ 

l<«<2vTF (,t^-a,n) = l (d,7it) = l 

(t2-r,lt) = l a = r(Taod (n,h)) r=0 mod (d^ 

and 

^ odd ^ 

^2 « E E E E \E{kY,Y;^{t,a,r),[nd\h])\ 



l<k<K ^ l<t<2vW n<U Q(mod r^) 

(<i,nt) = l c. = r(mod (n,h)) 

>-=o(mod (d^.h)) 

« E E V ^ |i?(fcF,r;a,«)| (17) 

l<k<K q<R'^Uh a mod q 

since each q < E?Uh can be written as g = [nd^, h] in at most R ways, and for each fixed 
integer t, and for any a ^ a' mod n, v{t,a,r) ^ u{t,a.' ,r) modulo q = [nd^,h]. We now 
use: 
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Theorem 7 (Barban- Davenport- Halberstam) Let X,Y be positive integers such that X 
Y < X. Then, for any N > 0, there exist M > such that 



J2 E \E{X,Y;a,q)\'« 



q<Q » 9 



whenever Q < x\og x. 

Using Cauchy-Schartz and Theorem [7] on (|17p . we get that for any A> 





f ] 


1/2 


( \ 


^2 < i?^ E 


J2 \E{kY,Y;a,q)\' 




y - 


l<k<K 


q<R^Uh 




q<B?Uh 











1/2 



< xlog 



(18) 



since 



R^Vh < 



los^'x 



for any ilf > 0, and x sufRciently large. 
We now evaluate 5*1. Consider the sum 



odd odd 



S{T) 



i<t<T n<U a(mod 71) d<H 

(t2-r.fe) = l (t2_Q,„) = l (£i,,it) = l 

Q = T-(mod (n,h)) i- = mod ( _ (,) 



Theorem 8 Lef R, U as before. Then, as T,x ^ oo we have for any e > 



S{T) = -CT + O 
where £ is the constant given in (Qp. 



Tlogj? 
R 



O 



1 



(19) 



Let us assume for a moment the previous theorem, which will be proved in the next 
section, and let us show how the evaluation of 5*1 in (fT6|) follows from the asymptotic of 
S{T). This wiU complete the proof of Theorem H 

We define F{t) such that 

odd 

S{T) = E ^W' 



l<t<T 
(t2 _r,/i) = l 



where S{T) is the sum defined in fTO]) . and consider 

odd 



l<t<2V^ 
(t2 _r,/i) = l 



XlogX 
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Using Theorem |S] and partial summation we get 

S.iX) . fiAX-er^^dt^^^OiHR). (20) 

Replacing (|20| into (fT6|) . we get 

1 

l<fc<A' l<k<K 

= c^+of^^y (21) 

logo; \\og^xJ 

Using (|2ip . and collecting the error terms from (flSl) . Lemma [6] and (fTS]) with /3 > 3, this 
shows that 

^p(p-l) logx Vlog^x/' 
and it completes the proof of Theorem [2l 

5 Proof of Theorem [8] 

Let 

(t2 -a,„) = l 
QSr mod 

be the sum over residues modulo n that appears in (|19p . 

Lemma 9 Let r, ft,, t he integers such that {t^ — r,h) — 1, and let p be an odd prime. Then, 
Ct{n) is a multiplicative function of n, with value at prime powers given by 

1. If p\ h, then Ct{p^)p~ ' 



(ja^, h) \p^ 
2. If p\ h, then 



ifp\t,l odd; 
-l/p if p\t, (■ odd; 

1 — 1/p ifp\t,£ even; 
1 — 2/p if p \t, i even. 



Proof: This is a straightforward case by case computation, and we omit it. 

First, for each fixed odd t in (fT9|) . such that (<^ — r, ft) = 1, we evaluate the sum 

odd / \ odd / 

71 



in{\nd^,h\)' 
n<U d<R ' il 

- {d,nt} = l 

r = Q mod (d'^ ,h) 
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For any {d, n) = 1, we have that 



We also observe that 

51 7:7^ ^ H 



log log d log R 

mod (<i2,J>) 



and 

° ct{n) ■rA log log n ■tA 2"("Uoglogn 1 



^ rup^"! "11 T) 

for any s > 0. Then 



r=0 mod (d^,h) 



where 



odd / N odd ( j\ odd odd , 



n 

n>l d>i 



(d.ii*) = l (d,t) = l (n,d) = l 

eO mod (ti2,h) (d2,h)|r 



We now use the multiplicativity of the functions involved to write the constant Ct as an 
Euler product. 

Lemma 10 Let r, h, t be integers such that {t'^ — r,h) = 1, and {h, r) is squarefree. Then, 
where 

n4 „3 



Pf ^^- 1 TT P Til. l\Tf P-P-'^P-P+'^ 



and all the products run over odd prime numbers. 
Proof: We first observe that 



- p3 - 2p2 _ p + 1 ^ _ + 2p ~ 1 
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so each of the products of Ct is convergent. Although intricate, the proof consists of a 
combination of straightforward computations using Lemma[9l We always assume that every 
prime appearing in the products below is odd. We first note that 



odd 



E 



d>i 

{d,nt) = l 
= mod (d2 ,h) 



^i{d)ipi{d\h)) 



p\\h 



p\nht 



Hence, using ([22|) . we get 



odd 



Ct^F{h,t) J2 



n>l 



ct{n)ip{{n, h)) 
nip(n) 



p\^r,,^) 
p\\h. 
Pit 



n 1- n 1 



1 



p{p - 1) 



for 



' p\ht ^ 



pip- 



piih 

p\r 

p\t 



Again, writing the sum over n as an Euler product, we get that 



Ct=F{h,t)\l 1 + %)^. 



where 



1 



1 

1 - - 
p 



pip - 1) 
1 



1 1 



when p \ ht] 

when p \\ h,p \ r^p \t] 
otherwise. 



vip^) 



(26) 



- (piip^,h)) f r\' 

Finally, we use LemmalHlto note that when p\h, q(p^) — = ( ~ ) > independently 



of t. For primes p ] h, we have that tp((p' ,h)) — 1. Hence, by splitting the inner sum in 
(|26p into odd and even terms, we get 



E 

]> 



p 



Ctip>) ^jjp^ ,h)) _ 

■[ p' •fip') 



ctip) , ct(p2) 



The result now follows by considering the different cases in Lemma [SI 
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We now proceed to prove Theorem |51 In the following, all primes p are odd and all 
products are restricted to odd primes. Let us call G the multiplicative function with value 

2p^ + p — 1 

at a prime p given by G{p) — — j ^ 5 . Using (j23[) and Lemma llOi we have 

p4 _ _ — p + 1 

that 

S{T) = P[rM i: E A^^(d)G(d)+o(^^ 

t<T d\t ^ 

(t2-r,h) = l (d,h) = l 

= P(r, h) E M^(d)G(d) E ' 1 + O (^^) ■ (27) 

£i<T t<T/d ^ 

(<*.'») = ! (d2t2-r-,h) = l 

To compute the inner sum, we write 

odd odd 

E 1 = E E Mfc)-E^w E 1- (28) 

t<T/d t<T/d k\{d^t^-r,h) k\h t<T/d 

(d'^t^ -r,h) = l t2=rd-2modfc 

tsl mod 2 

Because of the Moebius function, we can suppose that k is square-free. In that case, by 
the Chinese Remainder Theorem, the number of solutions modulo 2k to the congruences 
= rdT'^ mod k and t= \ mod 2 is 

' ' r 
P 



p\k 



Using that in ([28|l . we have that 



Now we observe that 



odd T I 1 " 

E 1 = ^ ni-^r^l+o(^('^)2"^'^)- (29) 



(d,h) = l 



p J 

Using (|29p and ([30| in ([27]) completes the proof of Theorem [8] with 



p\h \ I P\h ^ 



p{p-^-(j!)) 



1 ttP-Itt ^^t>-^-yp)) p4_2p^-p+i 
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6 Conjectures and Constants 



We develop in this section a precise conjecture for the asymptotic behavior of 

^%^r,hi^) = #{2 < p < X, prime : - 4p e A(r, h)}, 

following the standard heuristics, as in [LaTr| or |Ko| (for different but related questions). 
We want — Ap to be square-free, i.e. not divisible by P , for any prime t. li t\ h, we also 
have to take into account the fact that a^ — Ap= r mod h. 

Fix an odd prime ^, and suppose for now that H. \ h. To measure the probability that 
ap — Ap is not divisible by i"^, we use the Galois extension Q{E[£'^])/Q, where Q(i?[£^]) is the 
field obtained from Q by adjoining the coordinates of all the £^-torsion points of E. Since 
E[£'^], the group of i!^-torsion points of E, is isomorphic to Z/^^Z x Z/€^Z as an abstract 
group, fixing a basis of E[£'^], we obtain an injective group homomorphism 

pp : Gal(Q(£;[^2])/Q) ^ GLaCZ/^^^). 

Let G{f) be the image of pe2 in GL2(Z/^2^). For any prime p unramified in Q{E[e'^])/Q 
(i.e. p \ INe), the Frobenius automorphism dp is sent to a conjugacy class of matrices in 
GL2(Z/^^Z) such that for any g in the conjugacy class 

tT{g) = ttp mod i'^ 
det{g) = pmod^^. 

Let 

n{f) ^{ge G{f) : tr{gf - 4det(5) ^ mod i^} . 
We can then measure the probability that \ a^ — Ap by the ratio 

\G{P)\- 

By Serre's Theorem [5i], G{e^) = GL2{Z/£'^Z) for all but finitely many primes £. Further- 
more, there is an integer Me, depending on the elliptic curve E, such that the Galois group 
of the extension obtained by adjoining the coordinates of all torsion points of i5 to Q is the 
full inverse image in GL2(Z) of Gal(Q(£'[Afij]/Q) C GL2(Z/A^£;Z), where Z is the ring of 
adeles of Z. In particular, £ \ Me implies that G(^2) = GL2(Z/£2Z). The integer Me is not 
uniquely defined, and if some integer m satisfies the property above, so does any multiple 
of m. We remark that Me is always even. 
Then, for £ \ Me, we compute that 

GL2(Z/£2Z) :tr(.g)2-4det(.g)^0mod£2}| 



AW 



|GL2(Z/^22)| 



£^-2£'^~£+l 
^2(^2 _ 1) ■ 



Suppose now that £ \ Me, but £ \ h. We write h ~ £°'h' where a > 1 and {h',£) — 1. 
There are two congruence conditions modulo powers of £, namely cii — Ap ^ mod £'^ and 



16 



flp — 4p = r mod Let /3 = niax(a, 2). The probability that — Ap satisfies both 
congruences is then the ratio 

_\{ge G(£'^) : tT{gf - 4det{g) ^ mod and tr(c/)2 - 4det(c/) = r mod £"} | 

Again, Serre's theorem guarantees that G{£^) = Qljii^jl^X) since I \ Me- For such an odd 
prime one computes that the ratio above is 

^ ^'^'^ when^fr; 



m) = { 



e-i 



1 



when £ \ r and a — 1; 



when £\\r and a > 2; 



when l"^ \ r and a > 2. 

The last case (i'^ \ r and a > 2) happens only when ("^ \ (r, h), which is impossible when 
(r, h) is square- free. If (r, h) is not square- free, it is clear that n|; ^ ^^(.x) is empty. 

We now put all the local probabilities together. When £i,i?2 t Me, the probabilities 
modulo £1,^2 arc independent by Serre's Theorem. Using the probability Pi{i) when i \ 
HMe and P2ii) when i\ Me,C- \ h, the conjectural constant is 

eiih e\h e^h 

where P{Me) is the probability modulo Me- In order to give an explicit expression for 
P{Me), we need some notation. Let 

Me =11 and h = '[[r^'\ 

e\ME l\h 

If (. I Me, but £ f ft,, we define a{t} to be 0. For each prime t \ Me, let 

max {2, 7(£),a(f)}. 

Finally, let 

1\Me 

and let G(m) be the image of the Galois representation 

Pm ■- Gal(Q(£;[m])/Q) ^ GL2(Z/mZ). 

Then, 

\{g& G{m) ■- tr(5)2 - 4det(ff) ^ mod i"^ and tr(5)2 - 4det(ff) = r mod | Me} 
^(^^^ = \G(m)\ 
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Conjecture 11 Let h be a positive odd integer, and r an integer such that {h,r) is square- 
free. Then as x oo 

^E{a,b),rMi^) ~ CsF{E,r, h)r—, 

lug X 

where CspiE^r^h) is the constant given by I131\) . 



Then, Theorem [2] gives evidence for the asymptotic of Conjecture [TTl and also for the 
constant CsFiE,r,h) appearing on the asymptotic. 

A similar heuristic leads to the following conjecture for the number of primes p smaller 
than X such that p + 1 — ap{E) is square-free. 

Conjecture 12 LetHE{x) be the number of primes of good reduction such that p+\ — ap[E) 
is square-free. Then as x ^ oo 

HEix) ^ C'sAEh ^ 



\ogx 

where C'gp{E) is the constant 

\il{ME)\ -|-r 

^ \g{Me)\^\}^ {&~iW{t~iy 

The work of Gekeler mentioned in the introduction then gives evidence for Conjecture 
[T^ and in particular for the constant Cgp{E) appearing in the conjecture. We stress again 
that the techniques used by Gekeler and our techniques are completely different, but they 
both uncover the conjectural constants computed from Galois representations in that section 
(and of course, neither the work of Gekeler or the work of this present paper relies on Galois 
representations, and counting elements of Galois groups). 
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